* Doc 1D: 6833726 


19435:34 -1999 


$ : or Media . er 
Date: Wed, 6 Jan 1999 14:34:35 - ‘ oe ie 
X-Mailer: Internet Mail Service Comme | H1eR 
Classification: A ae 
X-Skyway-In;: 
X-Skyway-Out: 


. 
Classification: UNCLASSIFIED ,' +e 


Cheryl, As just discussed with you om the phone and understanding 

that you must provide an answer, suggést you Keep‘the first 

sentence and change the jdast sentengé to read: "This includes 

any items with built-im recording,’features." 2 

As I indicated, we normally don*t,like to publish anything about what we 
consider to be techfical security threats and not, and therefore 

would prefer a "no comment.” However, since you indicated NSA 

must answer the incoming question, this generic: response 

is acceptable. ,° a, Se 


cette Original Message--+-- 


v 


> From: Cheryl A. Welck {SMTP 

> Sent: Wednesday, Janudry 06, 1999 2:15 PM 

> To: 2 

> ES . 

> Subject: tatehent for Media 

> . 

> Classification: UNCLASSIFIED 

> Security Control,Marking: S@R=ORREGih=eimeiisin 
> . 

id . 

S are 

> 

> In my haste to "get the word to you," I neglected to include the statement; 
80, 

> here it is, and I apologize: 

> 


> "NSA/CSS prohibits use of any non-Agency owned photographic, video, and audio 
> recording equipment in Agency work spaces. This includes any items with 

> built-in recorders that repeat the audio with synthesized sound to mimic the 
> original audio signal." 

> 


> Once again, thank you. Approved for Release by NSA on 01-1 4, FOIA Case # 11340 
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Cheryl Welck 
Public Affairs hee 
963-5825 PDs “ 


ann Original Message----- . 
From: Cheryl A. Weick eee | ! 
Sent: ae eee) 06, 1999 PM a 
To: . 

Ce: mmel, Judith A ae . NSP4 


Subject: Statement for, the Media a 


vvvvy 


Classification: UNCLASSIFIED 
Security Control Marking: Sota anita peste eet 


FYI. This is the statement that we plan’ to provide to the Scripps Howard News 
Service, wno has inquired abo’ of "Furbies" at NSA. The statement is 
based on an answer written | on the Policy on Line. We plan to fax 
the statement and will not mention the word "Furbie." 


If for some reason you find this statement unacceptable, please let us know 
asap--the reporter is waiting to hear from us. 


Thank you, 
Cheryl Welck 


Public Affairs 
963-5825 
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Newsgroups: n.policy 


References: < 
Nntp-Posting-Host: 
Organization: The unconfigured xvnews people 


Classification: U//mewe git 
X-Newsreader: xvnews 2.3PLO an ae 
Lines: 18 hina en 

te A * : 
Classification: UNCLASSIFIED ase Ng 
Security Control Marking: #@R-OPREGEAIMUSE—ONEH =, 


Query: do Furbies record conversations on ‘not? Tape <eoorders 
are not very sophisticated, but we capre bring them in 
either. 


I suppose getting teased for pene trightenéa of Furby is 
better than getting yelled .at for trying,tto strangle Agent 
Mulder and shoot The Fresh Prince of Bef Air... :-) 
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Newsgroups: a n.polic: . 


Message-ID: [_ as | 
Classification: U//meue er 


Organization: The unconfigured ‘xiiews "people. . . 
X-Newsreader: xvnews 2.3PLO0 


References: 

Date: Wed, 13 Jan 1999 19:23:21 GMT 

Lines: 44 yielew 

mf Jerote: a 
>(U) I heard the news on channels 4 and 13 this morning, and I just e 
enoticed that it’s a headline story on the CNN Web site: oe 

> "National Security Agency bans ‘Furby’ from premises" ra 


2(U) The CNN story (with contributions from AP) contains this ,* 
>quote from the 15 December Policy On-line: ma 

Personally owned photographic, video, and audio regording equip- 
ment are prohibited items. This includes toys, such as "Furbies," 
with built-in recorders that repeat the audio with synthesized sound 
to mimic the original audio signal. We are prohibited from intro- 
ducing these items into NSA/CSS spaces. Those who have should con- 
tact their SSO for guidance. = 


vvwwwy 


>(U/ /jdm@ad@) Anyone else consider this maybe a little embarrassing to the 
>Agency? — 


Not as embarrassing as "Security Breach Caused by Employee’s Toy". A some- 
what farfetched scenario, but weigh this, bossibility against how badly anyone 
needs to have a furbie at work. . 

>(U/m@we) On top of all that, the statement quoted from the policy 

>posting about "built-in recoders"*ia simply not true. Furby ie 

>only a $35 toy and is not that ,dophisticated. As a previous 

>ENLIGHTEN posting pointed out,’ the "learning" the doll does 

>is programmed into it so that the longer you use it the more 

>it "knows." + 


Most speech processing records some audio samples long enough to produce 
statistics. Does the furbie flush these buffers? How much information 
is in a sample? We gould launch a study to find out, but asking people 
to leave them at hore sounds easier. 

A policy existe -against personally owned devices with audio record 
capability. 38 having toys at work important enough to make an exception? 
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Le a aR RS 
Newsgroups: admin.policy MES 


Pat. 


Subject: Re: NSA bans Furby, film at 11 
Message-ID: <j 
Classification: U//#eues 


Organization: The unconfigured xvnews people 


X-Newsreader: xvnews 2.3PL0 gue ad 
References: < ch 
Date: Wed, 13 Jan 1998 19:28:54 GMT ras 
Lines: 15 Pe 


Now the big curiosity is what medium a Furby uses to record audio... 
I would aseume that since it can "respond" to certain audio cues that 
it would use storage similiar to a digital ansyering machine or 
straight computer memory chips. 

Anybody know? “ 


You only get what you give... 


Approved for Rele by NSA on 01-11-2024, FOIA C 
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Newsg 5 OF WSR eS, Sew 
Subject: Re: NSA bans Furby, film at 11 VE EBT egy 
Date: 13 Jan 1999 14:53:55 -0500 

Organization: C43 
Lines: 57 
Message-ID: 
References: 
NNTP-Posting-Rost: 
Classification: U//#eem 


eard che news on channels 4 and 13 this morning, and Zz Just 
>snoticed that it’s a headline story on the CNN Web site: * 
. 
>> “National Security Agency bans ‘Furby’ from preelsage 


>>{U) The CNN story (with contributions from AP) contains “this 


>>quote from the 15 December Policy On-line: . 

€ . 

>> Personally owned photographic, video, and augio recording equip- 
>> ment are prohibited items. This includes toys, such as "Furbies," 
>> with built-in recorders that repeat the audio with synthesized sound 
>> to mimic the original audio signal. We are prohibited from intro- 
>> ducing these items into NSA/CSS spaces. “Those who have should con- 
>> tact their sso for guidance. « 

‘y . 

>> (U/ (didi) Anyone else consider this maybe a little embarrassing to the 
>>Agency? . 


> 


>Not as embarrassing as "Security Breach Caused by Employee’s Toy". A some- 
>what farfetched scenario, but weigh,this possibility against how badly anyone 
oneeds to have a furbie at work. Ru 

> . 

>>(U//#eM@) On top of all that, the statement quoted from the policy 
»>posting about "built-in recoders" is simply not true. Furby is 

ssonly a $35 toy and is not tk&t sophisticated. As a previous 

>>ENLIGHTEN posting pointed sut, the "learning" the doll does 

>>is programmed into it so that the longer you use it the more 

>ait "knows." ° 

> nd 

>Most speech processing’ records some audio samplea long enough to produce 
sstatistics. Does the furbie flush these buffers? How much information 

>is in a sample? We’ could launch a study to find out, but asking people 
>to leave them at Home sounds easier. 

> . 

>A policy exists against personally owned devices with audio record 
capability. Ys having toys at work important enough to make an exception? 


{U) The info I got from the Furby Autopsy web site (I checked it out 
from home this morning) suggests that the microphone is used only 
to detect sounds and that the toy doesn’t show any sign of using 

the sounds for anything other than a trigger for a response. 
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(U//dle@iéée) Also, my post was not intended to condone the introduction 
of electronic gizmos to our SCIFs, I agree with you and the policy 
entirely that electronic devices not specifically given an OK 
should be left at home. 


(U//Pewe) Well, hopefully the hairy intruders have been properly 
handled and removed from Agency spaces. We surely want to avoid 
the situation turning into a FURBYGATE. ;) 


Doc ID: 6833693 


Xref: 

Newsgroups: admin, polic 
Path: 
From: 
Subject: Furl iscussion 


YY 
Message=30).<— —— 


Classificatio, 
4 ean 
Nntp-Posting-Host 


Reter tices | [eee ae er era] . 
Date: Wed, 13 Jan 1999 20:03:58 GMT 
Lines: 44 


(U) We have posted this kind of notice in the past, and see the need to . 
do so again: . 


(U) We have frequently reminded Agency employees, military assignees, 
and affiliates that information exchange services such as e-mail,. ESg, 
ENLIGHTEN, IRC, etc. are for OFFICIAL USE only! Each of us creates: 
Agency records as we use these services, and those records couj'd very 
well be responsive to a Freedom of Information Act (FOIA) request,” If 

the information is not exempt from release under the FOIA, bhe information 
is released to the public. - . 

(U) We are asking that all users think for a minute aboyt the ‘material 
(titles as well as content) they want to send out over "these. “information 
exchange services. Here's a good way of deciding whether of not you should 
go ahead and share the information on these services’ - : 


Ask yourself: "Would it look good for me and/ot NSA if this material 
showed up on the front page of [insert name of paper here)?" 

If the answer if "no," or "I'm not sure," ox "I don’t think so," 

or anything similar, you would undoubtedly’ be better oft not 
posting/sending/sharing the information. * . 


(U) We have also posted numerous articles to Policy On-Line dealing with 
what constitutes a record, and how the,information contained in a record 
may be releasable under the FOIA. Whfle it is very easy to add a seemingly 
humorous or innocuous remark to an ENLIGHTEN thread, or to an e-mail message, 
or to the margin of a hard copy dogument, all, ‘Agency employees need to 
understand the serious implications of doing,"so. 

(U) Please be reminded that whatever you post, e-mail, and/or add to a 
margin (or in any other way create as a pérmanent record) could be 
released to the public unden the FOIA. Before you post, send, or 

write, think about whether,the information could possibly be 

embarassing to you or to fhe Agency, bécause once the information 

becomes part of the Agenty’s holdings+it is a record that could he 

released under the FOIA. Some postings, if taken out of context, could 

be seriously misinterpreted and substantially embarrass NSA. 


‘ 
(U) As a related agide, the next issue of Policy On-Line will contain an 
article about the*"Furby issue.",” 
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Subject: Re: NSA bans Furby, film at 11 


Classification: UNCLASSIFIED 


eee, ny 


Organization: K4744 


Classification: UNCLASSIFIED 
Security Control Marking: —S@=—OSREGS=ues—eNEie 


> ane eeeee 
> mr.[-___]wrote: 

> >(U) I heard the news on channels 4 and 13 this morning, and I just 
> noticed that it’s a headline story on the CNN Web site: 


> 


>> "National Security Agency bans ‘Furby’ from premises" 
> 

> >(U) The CNN story (with contributions from AP) contains this 
> >quote from the 15 December Policy On-line: 


> Personally owned photographic, video, and audio recording equip- 

> ment are prohibited items. This includes toys, such as "Furbies," 

> with built-in recorders that repeat the audio with synthesized sound 
> to mimic the original audio signal. We are prohibited from intro- 

> ducing these items into NSA/CSS spaces. Those who have should con- 

> tact their SSO for guidance. 


> >(U//m@a@@) Anyone else consider this maybe a little embarrassing to the 

> »Agency? 

> 

> Not as embarrassing as "Security Breach Caused by Employee's Toy". A some- 
> what farfetched scenario, but weigh this possibility against how badly anyone 
> needs to have a furbie at work. 

> 

>(U/ dee) On top of all that, the statement quoted from the policy 
>posting about “built-in recoders" is simply not true. Furby is 

ponly a $35 toy and is not that sophisticated. As a previous 

>ENLIGHTEN posting pointed out, the "learning" the doll does 

>is programmed into it so that the longer you use it the more 

>it "knows." 


> 
> 
> 
> 
> 
> 
> 
> Most speech processing records some audio samples long enough to produce 
> statistics. Does the furbie flush these buffers? How much information 

> is in a sample? We could launch a study to find out, but asking people 

> to leave them at home sounds easier. 

> 

> 


A policy exists against personally owned devices with audio record 
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> capability. Is having toys at work important enough to make an exception? 


> 


This is probably REALLY REALLY grasping at straws (hey, I’ma tester, so 

I have to come up with all sorts of feasible scenarios anyway), . 
er ee the original question from 15 December stated that two of the ,° a 
toys were in an office that (s)he visited. Nowhere does it say that they 
were seen “in action". It could be that the Furby-owners had purchaded 

the prized little critters that day, and wanting to keep a close’ eye on 
them brought them into the building rather than leaving them *in their 


vehicle.....never for a moment considering the possibility ‘that there 
would be any security implications. I’m probably wrong and the Furbys 
were seen "in action", but......anyhoo, as Mr said there is a 


policy against personally-owned devices with audio record capability, 
and a Furby has been determined to fall into that category hence they 
must be checked at the door on the way in. 


That's why all toys at my desk are of the non-electronic variety. :) 
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References: . : 
Date: Wed, 13 Jan 1999 20:09:09 GMT a ha 
Lines: 30 2 . 
Classification: UNCLASSIFIED : : 


Security C 
In article writes: 


|> (U/Amewe) On top of all that, the statement quoted from the policy 
|> posting about "built-in recoders" is simply not true.’ Furby ig 

|> only a §35 toy and is not that sophisticated. As a.previous 

|> ENLIGHTEN posting pointed out, the “learning" the ‘doll does 

|> ds programmed into it so that the longer you use’ it the more 

|> it "knows." 


(U) But Furby does have recording, transmissipn, and playback 
capability. There is a remote possibility that the toy, as 
designed, can play back a snippet of recognisable conversation. 
Further, who knows what the failure modes of the thing are? 

(U) There is also an I/R port - a Furby could store signals 
from any classified wire systems nearby. (So at least 

keep it away from the labi . 


) 


(u) [See http://www.phobe.com/firby/ and 

http: //www. homestead. com/hackfurby/ 

on the outside ‘net for infprmation on what the "toy" can 
really do!] a 
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film’dt'it+--. 


Subject: Re; NSA Furb’ 


Message-ID: 
Classification: U//meue 


Distribution: 
Date: Wed, 13 Jan 1999 21:52:52 GMT f: 
Lines: 12 ote 2 


éls 4 and 13 ‘this morning, and I jus 


it 


In article 
noticed that it’s a headline story on tHe CNN Web site Fs 


> 


> 


"National Security Agency bee ‘Purby’ from premises" 
FYI: The Washington Post article ‘on the subject can be found in the 


13 January "Selected News Items": 


4 


Doc ID; 6833706 


hu_Jan 14 07:54:53 1999 


Reply-To: 
Subj 

To: 
Content-Type: text’ *+.,_ 
X-Sun-Charset: us-ascii 
Content-Length: 3693 


Classification: UNCLASSIFIED S eae 
Security Control Marking: @OR-GEREGHAL-USE-ONb 


P Ny 
X-Mailer: Internet Mail {1 servicel J . 
Classification: UNCLASSIFIED * 
X%-Skyway-In: 
X-Skyway-Out :! 
Content-Length: 2100 


Classification: UNCLASSIFIED 
Security Control Marking: SOR=ePMSerat=tse=ornt 


The answer you've all been waiting for...yes, GCHQ will ban them as well. 
14 January 1999 

Ps/Director (Fax) Presswatch Group (Email) 

PRESSWATCHING: FURBYS! 


SOURCE 
The Times, Independent, Telegraph, Sun and Glos Echo. 
LINE TO TAKE 
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GCHQ has a policy that all recording media should be declared to security on 
entry, Furbys will doubtless fall under that policy. 
SUMMARY 


Furbys could pose the latest threat to national security interests, say top 
US spy chiefs. NSA has banned the pets from its Fort Meade premises in 
Maryland. 


The toy is embedded with a computer chip allowing it to utter 200 words - 
100 in English and 100 in ‘Furbish’. Because it can repeat what it hears, 
the NSA was worried they would repeat classified information. Officiale 
were worried that people would take Furbys home and ‘they’d start talking 
classified’, according to a Capitol Hill source who monitors the 
intelligence community. 


In a memo to employees it says: ‘Personally owned photographic, video and 
recording equipment is prohibited. This includes toys, such as Furbys, with 
recorders that repeat the audio with synthesised sound to mimic the original 
signal. We are prohibited from introducing these items into NSA spaces.‘ 


Staff are advised to contact their security officer for guidance if they 
have brought a Furby in headquarters, or presumably, if they discover one in 
a counter-espionage sweep. A security expert said: "It’s not a good thing 
to have cute toys sitting on desks that have the potential of repeating 
electronic data." 


A used to work for the spy agency, said: "I feel sorry for 
the little fellow,if he's on the run in there. If they find him they'll 
probably take him fo ,the basement and aweat the secrets out of him under 


bright lights." ict 
GCHQ COMMENTS Mais 
Te. The Echo called the press office for a comment, and was given the 


above line to take. We are awaiting a follow-up article in today’s edition. 
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rron|_________ tm Jan 14 07:06:49 1999 


Date: Thu, 14 Jan 1995 ‘ovid6:2¢ ~e500-4EST).,., || 


X-Mail-Program: 
Subject: for printing * 
Classification: mii@idem ae 


(U) Anonymous Question About Furby Article in Press ,* 


Classification: sese= Pr tad 


QUESTION: (U) I noticed an article in the newspaper which apparently 
was based on the Policy On-Line article about Furbies in the work- 
place. I have a couple of questions - 


1. Was the release ofthe Policy On-Line article, or the infor- 
mation in the article, subject to prepublication review? 


2. Isn't there a regulation governing employee interaction with 
the media, or was this information released by the NSA Public 
Affairs Office 


POLICY ON-LINE ANSWER: (U) For our readers who aren’t aware, this 
question refers to the fact that our 15 December 1998 article 
entitled "Are Furbies OK in NSA?" appeared almost verbatim in the 
13 January 1999 Washington Post, in an article entitled "A Story of 
Hairy Espionage - NSA Bans Furby From Spy Agency's Premises." The 
story also showed up in other print media, as well as radio and 

TV news broadcasts. 


(U) Yes, the information was subject to prepublication review. The 
real question to ask is "Did the information undergo prepublication 
review prior to being released?" That answer would be "No, it did 
not." 


(U) Yes, there is a regulation governing employee interaction with 
the media (NSA/CSS Regulation 10-70, "Media Contacts", and the 
Public Affairs Office became aware of the document's release to the 
media when the reporter called. 


(U) The public dissemination of Agency or Intelligence Community 
Information requires prepublication review by N5P6 and approval by 
NSA Public Affairs, or review and release under the provisions of 
the Freedom of Information Act or Privacy Act. Even if information 
(electronic or otherwise) is not specifically marked as classified 
or FOUO, or is actually marked as unclassified, you may NOT assume 
that it is unclassified and/or authorized for release--it must be 
vetted through N5P6 for classification review and any public/media 
disclosure is REQUIRED to be approved through NSA Public Affairs. 
Government records, electronic or paper, are also subject to public 
disclosure under the stipulations of the Freedom of Information Act 
(FOIA) and the Privacy Act (PA) as we have indicated here many times 
in the past. 


(U) Furthermore (as we have stated here on many occasions) each NSA 


4, FOIA 
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employee or affiliate who has signed a non-disclosure agreement as 

a condition of employment or affiliation is HONOR-bound by virtue of 
that agreement not to disclose any information about NSA or the 
Intelligence Community without the express approval of NSA Public 
Affairs or unless that information has been release under the FOIA 
or PA processes. Of course, the nondisclosure agreement is a written 
contract and legal remedy for a violation of the agreement could be 
sought as well. 


(U) The information provided to the media, referred to in the 
question above, appears to have been provided by an individual who 
chose not to honor that agreement. There are channels for seeking 
the release of such information, but they were circumvented in this 
case. There are mechanisms for challenging what one may be concerned 
may be a poor policy decision, but the individual in this case ap- 
parently chose to ignore those for reasons we may never know. We do 
not know who that was, but even if we did, we could not disclose 
that information. Nor would we discuss disciplinary actions taken 
against any employee in any case. 


(U) You are also reminded that it is your responsibility not to 
comment further upon or provide additional detail about information 
which is publicly released and, furthermore, this is most imperative 
in cases where classified information may have been compromised or 
improperly released. 


(U) If you want to go back and see the articles we've posted in 

the past concerning our nondisclosure obligations, or those regarding 
our responsibilities in regard to interactions withthe public and 
media, use the POL database to access the following: 


- Reminder About Handling Inquiries from the Media, 03/02/95 

~ REMINDER TO THE WORKFORCE - Employees’ Responsibility in 
Regard to Interaction with the Public and Media, 03/31/95 

~- Media Contacts, 05/12/95 

- Employee Responsibilities and the Nondisclosure 
Agreement, 07/19/95 

- Reminder to Workforce - Employees’ Responsibility in Regard to 
Interaction with the Public and Media, 07/28/95 

- Another Reminder About Your Responsibilities with Regard to 
Interaction with the Public and Media, 03/24/97 

- Unauthorized Disclosures process, 06/04/98 

- Our Non-disclosure Obligations, 10/22/98 


eee etree ee titel 


Mailed to 
Mailed toy 
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Organization: z4 . 2 P 
X-Newsreader; 3 . 
References: 

Distribution [7] . 

Date: Thu, 14 Jan 1999 13:11:55°GMT 
Lines: 7 AR 


. 


So, WHY was an internal policy concerning "furbies" on the news? 
I don’t think we have a problem with non-employees wandering into 
NSA with a furby ,“nder their coat." 


eel 
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Xref: 
Newsgrou} 
Path: 
From: 
Subject: Re: 
Message-ID: 
Classification: UNCLASSIFIED : 


Sender: 
Nntp-Posting-Host < a 


Organization. 
Distribution:[ > 

Date: Thu, 14 Jan 1999 13!45:42 GMT a 
Lines: 22 "8 ae 


Classification: UNCLASSIFIED = 
Security Control Marking: eee 


>So, WHY was an internal policy ‘concerning wturbies* woh! the news?, Si te 
>I don’t think we have a problem with dn employees wanker {ng. 1 inte’. 
>NSA with a furby "under their coat, 


er ares ale 
ass 
. 


Among other reasons, I believe someone dropped a brand new Furby" (st fitter, 
in its unopened box) into the Toys For Tots box near one of the 
entrances to one of our facilities near the end of last year. They 
brought it "inside the fence"; hence, it falls under the Prohibited 
Items jurisdiction. 


slim man chats jive 


Message-ID: 
Classificatic 
Sender; 

Nntp-Posting-Hos: 
organizati 
References: 
Distributioy 
Date: Thu, 
Lines: 7 . 


mi: 


Please cease and desist posting on.this topic immediately. 


Thanks - * 


